Privacy Policy
Last updated: 1 October 2026
Who we are
Smart Space (“we”, “us”) is a trading name of Smart Space Technologies Limited, a company registered in Ireland under number 625163, with its registered office at Fourwinds Cottage, Cuckoo Corner, Ballymerrigan, Co. Wicklow, Ireland We are a Ring camera and video-doorbell installation business operating across Dublin and Leinster, and Smart Space Technologies Limited is the data controller for any personal data collected through smart-space.ie. You can contact us at info@smart-space.ie or by phone on 01 513 0424.
What we collect
The personal data we collect depends on how you interact with us:
- Contact form: name, email, phone number, the topic you selected, and the message you wrote.
- Booking and consultation: name, email, phone, installation address, and your chosen date and time slot.
- Paid order (Stripe): name, email, phone, billing address, installation address (if different), and payment-card details. Your card number is processed entirely by Stripe and never touches our servers.
- Marketing attribution: if you arrived from a Google Ad, Facebook ad, or other source, we record the click ID (e.g.
gclid) and any UTM parameters so we can credit the right channel for the conversion. An ad in ChatGPT adds a similar identifier for OpenAI. We record it in the same way, with the browser reference OpenAI's pixel sets (see Cookies below). - Matching an enquiry to an ad: if you have accepted cookies and then send us a form or pay for an order, we give Google and OpenAI a hashed (one-way scrambled) copy of your email address and phone number, from your browser and from our server, along with your IP address and browser type. They use it to tell us whether your enquiry or order came from one of our ads. Once you have accepted, Google's advertising tag may also pick up contact details you type into our forms (name, email, phone or address) and send Google a hashed copy for the same purpose. If you decline cookies, none of this is sent.
- Website analytics: Google Analytics 4 records anonymous interactions (pages viewed, scroll depth, clicks). We use Google's Consent Mode v2: by default we collect no personal advertising or analytics data until you accept cookies. Google's tags still load, and until you accept they send only anonymised pings that set no cookies and carry no identifier. Google uses these to estimate, as a total, how many visits led to an enquiry or a sale.
Why we collect it
The lawful bases under GDPR are:
- Performance of a contract, when you place a paid order, book a free consultation, or request an installation, we need your contact details to deliver the service.
- Legitimate interest, to respond to enquiries, schedule installations, and run a small business safely.
- Consent, for advertising and analytics cookies. You give consent via the cookie banner; you can change your mind any time by clearing site data and re-visiting.
Who we share it with
We use a small number of trusted processors to run the business. Each is listed below with the data they receive and where they store it:
- Stripe (payment processing), name, email, phone, address, payment details. Stored in the EU and US.
- Calendly (booking calendar), name, email, phone, address, booking slot. Stored in the US under SCCs.
- Google (Google Workspace, where our booking calendar is kept), name, email, phone, address, booking slot. Stored in the EU and US under Google's data processing terms.
- Resend (transactional email), your email address and any message you sent us. Stored in the EU.
- Twilio (SMS alerts to our installation team), your name, phone number and installation address, sent when an order is placed. Stored in the US under SCCs.
- Google (Analytics 4 and Ads), anonymised behavioural data plus, when you consent, hashed email and phone for advertising attribution. Stored in the EU and US under SCCs.
- OpenAI (ChatGPT ads), only when you consent: the identifier of a ChatGPT ad you clicked, a random reference for your browser and, with an enquiry or order, your hashed email and phone, IP address and browser type, so it can tell us which of our ads in ChatGPT led to it. Stored in the US.
- Google Sheets / Apps Script (internal lead tracking), every field above. Stored in the EU.
- Vercel (website hosting), request logs and error logs only. Stored in the EU (Dublin).
We never sell your personal data to anyone. We never share it with third parties for their own marketing.
How long we keep it
- Lead enquiries (no purchase): 12 months, then archived.
- Customer order records: 7 years (Irish tax law).
- Marketing attribution (gclid, ChatGPT ad identifier, UTM): 90 days from first capture.
- Cookie consent preference: 12 months from your most recent decision.
- Website analytics in Google Analytics: 14 months (the maximum allowed by Consent Mode v2).
Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Correct anything that's wrong.
- Have your data erased (the “right to be forgotten”).
- Object to processing based on legitimate interest.
- Withdraw consent for cookies and marketing at any time.
- Lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).
To exercise any of these, email us at info@smart-space.ie. We'll respond within 30 days.
Cookies
The cookie banner you see on your first visit lets you accept or reject advertising and analytics cookies. Essential cookies (e.g. shopping-cart state) are always on because the site can't function without them.
If you accept, Google Analytics and Google Ads set their cookies, and OpenAI's ChatGPT ads pixel sets two of its own: __oppref (30 days), the identifier of the ChatGPT ad you clicked, if you came from one, and __obref (1 year), a random reference for your browser so OpenAI can connect a visit from one of our ads to an enquiry made later. None of these is set if you decline or don't answer the banner. If you accepted before 1 October 2026, when this policy first named OpenAI, OpenAI's pixel stays off for you.
Changes to this policy
We'll update this page if our processors, retention periods, or the data we collect ever change. The “last updated” date at the top reflects the most recent change. Material changes will be highlighted on the homepage for at least 30 days.
See also our Terms & Conditions.